Privacy policy

1. Privacy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Who is responsible for data collection?

Data processing on this website is carried out by the website operator. You can find their contact details in the section “Controller” and in the legal notice of this website.

How do we collect your data?

When you visit the website, our IT systems automatically collect technical data (e.g. internet browser, operating system or time of the page request). This data is collected automatically as soon as you enter this website. There are no user accounts, contact forms or newsletters.

What do we use your data for?

The data is collected to ensure that the website is provided without errors. We do not use tracking, advertising or analytics services, and we do not set any cookies of our own.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. Details can be found under “Your rights”.

2. Hosting

Hosting and delivery

This website is hosted by Lovable. The provider is:

It is delivered via the Cloudflare network. The provider is:

When this website is accessed, these providers automatically process information that your browser transmits in so-called server log files. These are:

Legal basis: Processing is based on Art. 6 (1) (f) GDPR (legitimate interest). Our legitimate interest lies in the technical provision, security and optimisation of the website. Cloudflare is based in the USA; data is transferred there on the basis of the EU-US Data Privacy Framework or EU standard contractual clauses (Art. 45, 46 GDPR). Lovable uses EU standard contractual clauses for transfers to third countries.

Further information can be found in the providers’ privacy policies:

Fonts

The fonts of this website (Manrope and Sora) are stored on our own server and loaded from there. No connection to Google Fonts or other font providers is established.

Protection against misuse

To protect the website against attacks and automated access, Cloudflare uses security functions. Cloudflare may run a check script in your browser and set technically necessary cookies (such as “__cf_bm” or “cf_clearance”) that only serve to distinguish between humans and automated access and expire after a short time. The legal basis is Art. 6 (1) (f) GDPR in conjunction with § 25 (2) no. 2 TDDDG; our legitimate interest lies in the security and availability of the website.

3. Controller

The controller responsible for data processing on this website is:

4. Features of this website

Storage in your browser

We do not set any cookies of our own. In your browser’s storage (local storage) we only keep what is needed for the features you use: a manual choice of light or dark mode and the destinations on your shortlist. This data does not leave your device; you can delete it at any time in your browser settings.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in a website that is easy to use. Storage in your browser is permitted under § 25 (2) no. 2 TDDDG because it is strictly necessary for the features you have requested.

5. Your rights

Storage period

Unless a more specific storage period has been stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing it.

Revocation of your consent

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object (Art. 21 GDPR)

If data processing is based on Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format.

Information, correction, deletion and restriction

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correction or deletion of this data. You can also request that the processing of your personal data be restricted (Art. 18 GDPR). To do so, please contact the controller named above.

6. Competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is: